問題文
An enterprise wants workflows to be able to use actions authored inside the enterprise plus a small approved set of external actions, and nothing else. Which policy option should be selected?
選択肢
- Allow enterprise actions and reusable workflows only.
- Disable GitHub Actions for the enterprise and re-enable it for individual repositories.
- Allow enterprise, and select non-enterprise, actions and reusable workflows, listing the approved external actions.
- Allow all actions and reusable workflows, and instruct developers to use only approved external actions, relying on pull request review to catch any that are not on the list.